Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/460767ff-901b-3e59-9d58-2c9a6461ba4c.roa
File:                     460767ff-901b-3e59-9d58-2c9a6461ba4c.roa (raw, json)
Hash identifier:          YMlIZiZV/DiuF+liAa6hvHsB+2ffI1rfPIZY09P6UQo=
Subject key identifier:   2F:74:B3:06:89:3F:D7:BE:CC:B3:B3:2F:7A:F6:41:0F:34:08:5F:FA
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584EEEB759D594226C0305663800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/460767ff-901b-3e59-9d58-2c9a6461ba4c.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     271
IP address blocks:        142.231.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:59:d5:94:22:6c:03:05:66:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=3df45e47-99d7-4a75-aa92-2e7824ff48a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:f8:b6:cd:09:fb:04:e7:7c:5d:7f:cf:68:
                    ae:4b:13:72:19:c2:41:1f:a0:3b:e7:da:dc:de:71:
                    b8:16:1e:78:9d:23:09:43:55:df:fc:c7:69:75:c1:
                    05:03:ed:b5:e6:0d:5b:c9:27:d2:b9:fd:46:68:a1:
                    92:8a:2d:ad:68:1a:c3:85:4a:82:51:10:54:d2:27:
                    c8:f9:3f:b9:62:95:1f:97:ee:e6:0f:aa:4c:a3:91:
                    00:4a:64:a8:76:12:df:74:e4:32:a7:7d:9c:7c:9e:
                    ed:88:59:8f:53:aa:8b:39:96:c0:4c:90:48:b3:df:
                    4b:45:fe:e4:cf:22:e3:07:e0:9c:78:fa:93:ed:cb:
                    b8:5c:15:a2:9d:d8:b4:86:66:87:97:e4:9e:59:06:
                    86:75:54:0a:71:d2:b6:b1:3d:8c:6d:52:8a:7b:52:
                    4d:53:d9:a7:b2:89:eb:a9:e2:2c:4f:3c:90:6e:c3:
                    06:e8:05:44:49:90:87:02:02:01:80:6d:31:31:92:
                    86:d4:cb:1c:1b:1f:96:9b:68:d9:11:b1:33:60:bf:
                    a5:d2:fa:ba:e7:4e:8a:ee:a4:b2:3f:46:6a:47:d2:
                    96:5b:cd:33:5a:ee:f4:57:e1:4b:a9:67:24:66:05:
                    5f:aa:c0:a4:43:68:61:7f:55:af:ff:ab:d3:4a:74:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:74:B3:06:89:3F:D7:BE:CC:B3:B3:2F:7A:F6:41:0F:34:08:5F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/460767ff-901b-3e59-9d58-2c9a6461ba4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:4e:27:8a:2f:07:37:bc:70:2f:a2:d5:5f:ae:90:8e:47:
         9f:25:b8:e0:53:e2:04:e4:29:3c:ec:c0:b1:eb:46:d0:4b:25:
         8a:4b:cd:26:15:2c:19:e0:c6:93:e0:31:00:f7:64:a6:3f:09:
         4d:5f:72:d9:c1:16:e4:16:16:43:e7:d7:b0:0a:82:9a:80:9f:
         c5:64:e6:2f:40:98:af:97:43:b9:50:31:2e:41:03:33:bd:90:
         a3:03:3b:9f:5b:b3:32:a8:2b:6a:e6:e9:1e:fd:d0:5a:2c:bf:
         00:e8:f1:31:c5:50:e4:af:0d:77:a1:ed:70:58:45:46:86:52:
         1b:79:0f:4f:2f:da:7e:de:95:a5:e4:85:a8:fe:a2:11:2d:03:
         a3:2e:48:2c:bd:73:e4:32:34:27:29:0b:49:0e:76:08:6a:c0:
         d5:54:61:85:b6:9f:fb:ec:b5:e7:6e:7e:a1:03:7d:49:e7:a4:
         06:99:23:d6:4b:0c:c3:44:73:41:f8:1c:29:b7:46:be:b9:be:
         3e:54:1c:c2:7e:48:93:fe:84:da:20:66:dc:11:5c:c9:81:9b:
         c8:de:cf:64:9b:62:62:16:7a:6c:3d:c7:3f:f6:c2:fb:fb:a3:
         94:c3:5a:52:27:32:c1:c3:a7:b2:5e:c6:ea:2b:21:69:55:74:
         e5:a9:ab:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1nVlCJsAwVmOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
M2RmNDVlNDctOTlkNy00YTc1LWFhOTItMmU3ODI0ZmY0OGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23v4ts0J+wTnfF1/z2iuSxNyGcJBH6A759rc
3nG4Fh54nSMJQ1Xf/MdpdcEFA+215g1bySfSuf1GaKGSii2taBrDhUqCURBU0ifI
+T+5YpUfl+7mD6pMo5EASmSodhLfdOQyp32cfJ7tiFmPU6qLOZbATJBIs99LRf7k
zyLjB+CcePqT7cu4XBWindi0hmaHl+SeWQaGdVQKcdK2sT2MbVKKe1JNU9mnsonr
qeIsTzyQbsMG6AVESZCHAgIBgG0xMZKG1MscGx+Wm2jZEbEzYL+l0vq6506K7qSy
P0ZqR9KWW80zWu70V+FLqWckZgVfqsCkQ2hhf1Wv/6vTSnRF7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC90swaJP9e+zLOzL3r2QQ80CF/6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDYwNzY3ZmYtOTAxYi0z
ZTU5LTlkNTgtMmM5YTY0NjFiYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzeTieKLwc3vHAvotVfrpCOR58luOBT4gTkKTzswLHrRtBLJYpLzSYV
LBngxpPgMQD3ZKY/CU1fctnBFuQWFkPn17AKgpqAn8Vk5i9AmK+XQ7lQMS5BAzO9
kKMDO59bszKoK2rm6R790FosvwDo8THFUOSvDXeh7XBYRUaGUht5D08v2n7elaXk
haj+ohEtA6MuSCy9c+QyNCcpC0kOdghqwNVUYYW2n/vstedufqEDfUnnpAaZI9ZL
DMNEc0H4HCm3Rr65vj5UHMJ+SJP+hNogZtwRXMmBm8jez2SbYmIWemw9xz/2wvv7
o5TDWlInMsHDp7JexuorIWlVdOWpq9U=
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:29:10 2026 by rpki-client